CVE-2022-1665
Published: 21 June 2022
Summary
CVE-2022-1665 is a high-severity Public Key Re-Use for Signing both Debug and Production Code (CWE-1291) vulnerability in Redhat Enterprise Linux. Its CVSS base score is 8.2 (High).
Operationally, ranked at the 16.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-24951
Vulnerability details
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied…
more
to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.